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Acronyms 


¢ Combinatorial logic (CL) * Probability of configuration upsets (Pcontiguration) 

* Commercial off the shelf (COTS) * Probability of Functional Logic upsets (PrunctionaiLogic) 

* Complementary metal-oxide * Probability of single event functional interrupt (Ps¢_F)) 
semiconductor (CMOS) - Probability of system failure (P.,stem) 

¢ Device under test (DUT) - Processor (PC) 

- Edge-triggered flip-flops (DFFs) - Radiation Effects and Analysis Group (REAG) 

* Error rate (A) - Reliability over time (R(t)) 

* Error rate per bit(A,,,) - Reliability over fluence (R(®)) 

* Error rate per system(A,, stom) - Single event effect (SEE) 

* Field programmable gate array (FPGA) - Single event functional interrupt (SEFI) 

* Global triple modular redundancy (GTMR) - Single event latch-up (SEL) 

¢ Hardware description language (HDL) - Single event transient (SET) 

* Input — output (I/O) - Single event upset (SEU) 

* Intellectual Property (IP) - Single event upset cross-section (osc) 

- Linear energy transfer (LET) : Xilinx Virtex 5 field programmable gate array (V5) 

* Mean fluence to failure (MFTF) - Xilinx Virtex 5 field programmable gate array 

* Mean time to failure (MTTF) radiation hardened (V5QV) 


* Operational frequency (fs) 
* Personal Computer (PC) 
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Problem Statement 


Conventional methods of single 
event upset (SEU) analysis are 
not effective for characterizing 
error rates (1) or mean time to 
failure (MTTF) for complex 
systems implemented in field 
programmable gate array 
(FPGA) devices. 


The problem boils down to 
extrapolation and application of 
SEU data to characterize system 
performance in radiation 77] 
environments. a , 7, 

L* yf . 
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Abstract oS 


¢ We are investigating the application of classical reliability 
performance metrics combined with standard SEU analysis data. 
¢ We expect to relate SEU behavior to system performance 
requirements... 
— Example: The system is required to be 99.999% reliable within a given time 
window. Will the system’s SEU response meet mission requirements? 


— Our proposed methodology will provide better prediction of SEU 
responses in harsh radiation environments. 
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Background 
(Traditional Method for SEU Calculations) 


¢ Conventional goal: Convert SEU cross- Osry = #errors/fluence 
sections (Oc-y: cm?/(particles)) to error = #errors/tit 


rates (1) for complex systems. ET: Linear energy transfer 
Heavy lon ("Cosmic 


¢ Common methods of SEU analysis 
include the following steps: 
— Perform SEU accelerated radiation 
testing across ions with different 


linear energy transfers (LETs) to 
calculate og-ys per LET. 

— Given Ogey (per bit) use an error rate 
calculator (such as CREME96) to 
obtain an error rate per bit (,,,, ); 

— Multiply 1,,, by the number of used 
memory bits (#UsedBits) in the 
target design to attain a system error B 


rate (1 . 
sian > AyiXx#UsedBits 


sostetal i 
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Background vasa 


FPGA SEE Susceptibility 


Oops (per category) are calculated from SEE test and analysis. 
Traditionally, global route contributions have been ignored. 

FPGAs vary and so do their SEU responses. However, the dominant 
Ocpys are usually per bit (configuration or functional logic). 

After the dominant o,,, is determined, we multiply the calculated 3,,, 
by the number of used bits (configuration or functional logic). 


Osgyu ae Ospy are 
P( f sured 1p ( easured byt n P 
saat | Fo ontentsion T functionalLogic SEFI 
Design Oseu Configuration Ogry Functional logic SEF! Osey 


OsEU yy 
Sequential and 
SEU cross section: o. Combinatorial Global Routes 
— logic (CL) in and Hidden 


Error rate: 2. data path Logic 
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Technical Problems with Current 
System Analysis Method (1) 
¢ Multiplying each bit within a design by 4,,,is 
not an efficient method of system error rate 
prediction. 
— Works well with memory structures... but... 


— Complex systems do not operate like 
memories. 


— If an SEU affects a bit, and the bit is either 
inactive, disabled, or masked, a system 
malfunction might not occur. 


¢ Using the same multiplication factor 
across DFFs will produce extreme over- 
estimates. 
- To this date, there is no accurate Asystem < Apix#UsedButs 
method to predict DFF activity for 
complex systems. 


¢ Fault injection or simulation will not 
determine frequency of activity. 
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Technical Problems with Current S 
System Analysis Method (2) 


¢ There are a variety of components 
that are susceptible to SEUs 
(clocks, resets, combinatorial 
logic, flip-flops (DFFs, etc...)). 

— Various component susceptibilities 
are not accurately characterized at 
a per bit level. 

— Design topology makes a 
significant difference in 
susceptibility and is not 
characterized in error rate 
calculators (e.g., CREME96). 


ice 
Input Vertex: DFF 
under 


analysis 


Error rates calculated at the transistor-bit level are 
estimated at too small of granularity for proper 
extrapolation to complex systems. 
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’*s Not Rein 
if eliability - 


¢ Classical reliability 
models have been used 
as a Standard metric for 
complex system 
performance. 


¢ The analysis provides a 
more in depth 
interpretation of system 
behavior over time by 
using system-level MT TF 
data for system 
performance metrics. 


R(t)=e/MTTF or R(t)=e"4 


A Comparison of Reliability and SEU vasa 


Analyses 
¢ Classical reliability models are measured across time. 

— This is because most of the failures that can affect 
performance in classical studies are due to wear-out 
mechanisms, or corner-case design bugs. 

— For each case, time to failure is a key measurement factor. 


¢ When evaluating SEU susceptibility, during radiation 
testing, particle fluence is the key variable for system 
failure as opposed to time. 

— Missions required to operate in space environments will be 
susceptible to fluences (® particles/(cm2)) of ionizing 
particles . 

— Asa metric of SEU susceptibility, o,-ys are calculated 
across fluence. 

¢ Goal: In order to better characterize SEU susceptibility 
for complex systems, we would like to analyze given 
OceyS per bit and o.-yS per system. 
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Mapping Classical Reliability Models from 
The Time Domain To The Fluence Domain 
¢- The exponential model that relates reliability to MTTF 
assumes that across time (disregarding infant mortality 
and wear-out): R(t)=e"™7F or R(t)=e* 
— Failures are random. 
— Error rate is constant. 


_ 
— MTTF = 1/2. Parallel between 
¢ Fora given LET (across fluence): time and fluence. 


— SEUs are random. Gory = Herrors/fluence 
— Ogpy IS constant. Asystem = #errors/time 


¢ Hence, mapping from the time domain to the fluence 
domain is straight forward: 
—~to@ 
— MTTF © MFTF R(t)=e"MTIF & R(@D)=e%/MFTF 
—h ®  Ogey 
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Use of Environment Data 


Flux : particles/(cm? eday) 
¢ Typical (heavy-ion) 
environment data is 
expressed in particle flux 
across LET. 


¢ In many cases, missions want 
to know what is the reliability 
of a system, within a given a 
time window. 


— Solar Minimum i 
Solar Maximum 


100 Mils Al Shielding 


Flux (particles/(cm?eday)) > LET 


¢ When analyzing SEU system 10° io 10° 
: : LET (MeV*cm2/mg) 
behavior, this can also be M. A. Xapsos, IEEE NSREC Short Course, 
interpreted as: what is the aan ene oeianne 


reliability given a window of 
particle fluence. 
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Example S 


¢ Mission requirements: 
— The FPGA shall contain an embedded microprocessor. 
— Decision shall be made to select a Xilinx V5QV 
(approximately $80,000 per device) or a Xilinx V5 with 
embedded PowerPC (less than $2000.00) per device. 
— FPGA operation shall have reliability of 3-nines (99.9%) 
within a 10 minute window. 


¢ Proposed methodology: 

— Create a histogram of particle flux versus LET for a 10- 
minute window of time for your target environment. 

— Calculate MFTF per LET (obtain SEU data). 

— Graph R(®) for a variety of LET values and their associated 
MFTFs. R(®)=e®™MFIF 

— For selected ranges of LETs, use an upper bound of particle 
flux (number of particles/cm2*10-minutes), to determine if 
the system will meet the mission’s reliability requirements. 
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Flux versus LET Histogram for A 10- vasa 
minute Window 


Geosynchronous Equatorial Orbit (GEO) 
100-mils shielding 
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1.0E-08 
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1.0E-09 
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LET Bins (MeVecm?/mg) 
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Histogram Actuals: For Reference oS 


Frequency distribution of LET (MeV-cm?/mg) 


Cumulative Flux Count 
Flux 


pent (particles/(cm’ «1 (p ee Percent — 
Ominutes) 

0 To 0.07 3,068.53038 3,068.53038 0.99352 0.99352 
0.07 To 0.1 4.55258 3,073.08297 0.00147 0.99499 
0.1 To 1.8 15.17444 3,088.2574 0.00491 0.9999 
1.8 To 3.6 0.22905 3,088.48645 0.00007 0.99998 
3.6 To 20 0.06566 3,088.55212 0.00002 1. 
20 To 40 0.00093 3,088.55304 2.99929E-7 1. 


40 and over 2.94342E-7 3,088.55304 9.5301E-11 1. 
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MFTF versus LET for the Xilinx V5 MicroBlaze vasa 
Soft Processor Core and the Xilinx V5QV 
embedded PowerPC Core 


1.0E+08 ¢ V5QV: MicroBlaze with Cache Enabled 
= V5: PowerPC 
+ 1.0E+07 
2) MFTF = 1/o 
= SEU 

@ 1.0E+06 * ¢ 
2 
. = 
ts 1.0E+05 
LL 
fC 1.0E+04 
= 

1.0E+03 

1.0E+02 

0 20 40 60 80 100 
LET MeVecm?2/mg 
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Reliability across Fluence at 


S 


LET=0.07MeVecm?/mg And Below 


V5QV: no system errors 
were observed below 
LET=3.6MeVecm?2/mg. 
Total fluence > 5.0x10° 
particles/cm2. 


PowerPC: 


— System errors were 
observed with a 
MFTF=1 x10’ 
particles/cm2at an 
LET=0.07MeVecm2/mg. 


— No systems errors were 
observed at an 
LET=0.01MeVecm?/mg 
with a Total fluence > 
5.0x10® particles/cm? 


MFTF (particles/cm?) 


1.0E+08 


1.0E+07 


1.0E+06 


1.0E+05 


1.0E+04 


1.0E+03 - 


1.0E+02 
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“ mw V5: PowerPC 
| e 
- 
@ 
& 

i: 
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0 50 100 
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Reliability across Fluence up to LET=0.07 
MeVecm?2/mg — Low Bound Analysis 


Binned GEO Environment data shows approximately 3000 
particles/(cm2*10-minutes), in the range of 0.0MeVecm2/mg to 
0.07MeVecm?2/mg. We are using MFTF for 0.07MeVecm2/mg to upper 


bound this bin. 


1.000000E+00 

[ aa PowerPC: MFTF = 5.0x108 
—— BO 
a a — 
9.999850E-01 


9.999800E-01 


Reliability 


9.999750E-01 


9.999700E-01 
0 1000 2000 3000 4000 5000 6000 7000 8000 9000 


Fluence (particles/cm2) 
Reliability at 3000 particles/(cm2*10-minutes) > 99.999% for the 
PowerPC design implementation. 
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Reliability across Fluence up to LET=0.1 vasa 
MeVecm?/mg 


Binned GEO Environment data shows approximately 5 
particles/(cm2e10-minutes), in the range of 0.07MeVecm?2/mg to 
0.1MeVecm2/mg. We are using MFTF for 0.1MeVecm?2/mg to upper 


bound this bin. 
1.000000E+00 PowerPC: NV - 1-0x16 


9.999800E-01 iat 


9.999600E-01 


9.999200E-01 


ee 


9.998800E-01 at annroximate : Perr 
| 2 
9.998600E-01 10particles/cm<! 


Reliability 


9.998400E-01 


oO 
—_ 
NO 


3 4 5 6 7 8 9 
Fluence (particles/cm?) 

Reliability at 5 particles/(cm2*10-minutes) > 99.99% for the PowerPC 

design implementation. 


To be presented by Melanie Berg at Government Microcircuit Applications and Critical Technology Conference (GOMAC), Reno, NV, March 20-24, 2017. 19 


Reliability across Fluence up to LET=1.8 vasa 
MeVecm2/mg 
Binned GEO Environment data shows approximately 15 
particles/(cm2*10-minutes), in the range of 0.1MeVecm2/mg to 


1.8MeVecm?/mg. We are using MFTF for 1.8MeVecm2/mg to upper 
bound thPS°RF.°° 


9.998000E-01 


ae POW! CU: IV - 6.0x104 


> 9.997000E-01 Cee 

5 9.996000E-01 ee. 

© 9.995000E-01 ee 
9.994000E-01 ___We fall below 99.99% 

a enn R (db) —e 2/6.0x104 


9.993000E-01 Bparticles cm?! 


9.992000E-01 
4 8 12 16 20 24 28 


Fluence (particles/cm?) 
Reliability at 15 particles/(cm?*10-minutes) > 99.9% for the PowerPC 
design implementation. This is the most susceptible bin for the system. 
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So 


Reliability across Fluence up to vasa 
LET=3.6MeVecm?2/mg 


Binned GEO Environment data shows approximately 0.23 
particles/(cm2e10-minutes), in the range of 1.8MeVecm2/mg to 
3.6MeVecm?2/mg. 


1.00000E+00 

—— — V5QV: MFTF= 3.0%10° 
sacaaaladl PowerPC: MFTF = 1.2x10° 
9.99900E-01 


S seeoen 
3 9.99850E-01 
oO 
O 9.99800E-01 
R(@) =e 93.0109 
9.99750E-01 R(@)=e%/1.210 
9.99700E-01 


3 4 5 6 7 8 9 10 
Fluence (particle/cm2) 


Within this LET range, reliability at 0.23 particles/(cm?*10-minutes) 
> 99.999% for both design implementations. 
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(=) 
—_ 
NO 


Reliability across Fluence at vasa 
LET=40MeVcm2/mg 


Binned GEO environment data shows approximately 0.07 
particles/(cm2*10-minutes), in the range of 3.6MeVecm?2/mg to 


40.0MeVecn2/ftre 


0.9999 hie 15OV-N =Te? 
‘2 0.9997 
2 
0.9996 | We fall below 99.99% 
0.9995 at approximatel R ( @D)—e P/7.0x10 
wesnd 0.02particles/cm?! R(D) =e 82-817 


0 0.01 0.02 0.03 0.04 0.05 0.06 0.07 0.08 0.09 0.1 
Fluence (particle/cm2) 

Within this LET range, reliability at 0.07 particles/(cm2*10-minutes) > 

99.9% for both design implementations. We can refine by analyzing 

smaller bins. 
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Example Conclusion ‘a 


Using the proposed methodology, the commercial Xilinx 
V5 device will meet project requirements. 

In this case, the project is able to save money by 
selecting the significantly cheaper FPGA device and gain 
performance because of the embedded PowerPC. 
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Conclusions Nasal 


¢ This study transforms proven classical reliability models 
into the SEU particle fluence domain. The intent is to 
better characterize SEU responses for complex systems. 


¢ The method for reliability-model application is as follows: 
— SEU data is obtained as MFTF. 


— Reliability curves (in the fluence domain) are calculated using 
MFTF; and are analyzed with a piecemeal approach. 


— Environment data is then used to determine particle flux exposure 
within required windows of mission operation. 
¢ An example is provided to illustrate the strength of the 
proposed SEU characterization methodology. 


¢ This is preliminary work. There is more in the plans. 
This methodology expresses SEU behavior and 


response in terms that missions understand via 
classical reliability metrics. 
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